$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer File: 2CE7EAA613A389D3132F70754E25E343490494C5.cer (raw, json) Hash identifier: lzAUQdXwg1j1ZrfViv69kyiQQKqlYexwBiau57acf3c= Subject key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 249C5AA35EC46DC652BB2FF81432B6D7FC125D2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft caRepository: rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 12 May 2026 21:57:20 +0000 Certificate not after: Tue 11 May 2027 22:02:20 +0000 Subordinate resources: AS: 270888 IP: 177.129.240.0/22 IP: 2804:72fc::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 14 May 2026 18:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9c:5a:a3:5e:c4:6d:c6:52:bb:2f:f8:14:32:b6:d7:fc:12:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: May 12 21:57:20 2026 GMT Not After : May 11 22:02:20 2027 GMT Subject: CN=2CE7EAA613A389D3132F70754E25E343490494C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:97:c8:64:56:bc:34:20:38:99:96:5e:b0: 3a:90:59:9a:d1:22:72:42:cb:01:96:a2:19:03:35: 7b:7e:22:cc:87:12:f9:f1:c5:df:82:36:70:bc:13: 34:4b:9b:ac:87:c5:a6:e4:ac:47:e8:c3:bf:64:af: 8e:6e:0e:b0:18:9a:a2:75:4a:aa:f4:27:0b:7a:11: ff:23:9d:bc:80:6d:c9:09:1a:78:92:1f:be:2e:f8: 49:ed:b9:4b:5a:22:ec:ea:bc:44:0a:03:ca:d8:4c: c1:e8:07:20:69:56:f9:b0:ee:57:43:70:bf:3a:7f: d9:57:23:05:25:ad:f2:c9:08:59:6f:f6:2a:93:e9: e4:56:06:43:aa:ee:89:49:b8:88:75:3d:98:d9:d1: dd:7d:24:0b:48:44:07:f1:d3:2b:ee:56:cf:3a:a8: 8d:e7:d9:fe:a9:d2:b5:ee:99:4d:c2:ee:20:3a:be: 23:32:2a:d3:d0:4a:39:27:1b:b9:44:5d:b1:5e:9b: 23:69:8c:af:04:a5:0c:c9:87:cb:c3:40:5f:32:aa: 4d:84:ba:73:63:3b:79:80:40:27:d8:db:37:49:e5: a4:c3:00:b0:b5:36:f4:f9:47:c3:da:bf:9f:97:6b: 76:b4:b2:78:13:63:07:8b:75:ec:e5:f9:44:4d:48: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.129.240.0/22 IPv6: 2804:72fc::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270888 Signature Algorithm: sha256WithRSAEncryption a6:fe:58:cc:bd:1b:2a:8a:97:77:36:a1:d5:4d:a6:1e:86:c3: c5:11:a8:07:61:0b:51:bf:75:b0:ab:bf:cd:93:bd:7a:56:3a: ce:85:d1:f1:48:dc:5b:4a:e0:39:05:ba:96:b1:f1:08:f9:80: d6:96:95:64:20:8d:a1:81:2e:5f:bd:bb:6d:d6:df:70:0b:f7: 73:14:c7:04:9b:5d:12:f8:f0:af:5a:86:1f:43:3c:02:ce:d2: 8e:c0:5d:ec:d0:be:aa:f4:1c:b2:bc:8d:8b:9f:0b:fe:cd:65: a1:04:8d:f8:76:ed:5e:a1:8c:2b:e4:a2:c9:c2:ad:4b:9d:ee: 39:ff:77:e4:9f:61:b5:e0:d0:d1:48:7c:8c:32:3d:9b:e7:eb: be:2e:32:4a:a2:c0:d5:ae:15:f9:00:75:fb:fa:e3:3f:8e:ed: 11:96:45:b9:19:8d:9b:2d:0c:b0:9e:44:b1:ec:26:aa:7c:a9: 04:a5:75:1c:d4:39:77:a0:52:0f:9f:56:2e:c4:35:0f:ac:8a: 8c:69:76:4e:2a:31:cc:8f:e0:2e:1e:c1:bf:91:a1:10:2a:17: 4a:65:c6:32:b6:9a:c8:1c:0d:75:23:ca:4d:0d:1d:e8:c0:1e: 81:e0:65:6d:02:57:24:b1:96:be:c5:23:63:15:9d:1c:85:94: 71:47:28:b7 -----BEGIN CERTIFICATE----- MIIGMDCCBRigAwIBAgIUJJxao17EbcZSuy/4FDK21/wSXSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNjA1MTIyMTU3MjBaFw0yNzA1MTEyMjAyMjBaMDMxMTAvBgNV BAMTKDJDRTdFQUE2MTNBMzg5RDMxMzJGNzA3NTRFMjVFMzQzNDkwNDk0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJZfIZFa8NCA4mZZesDqQWZrR InJCywGWohkDNXt+IsyHEvnxxd+CNnC8EzRLm6yHxabkrEfow79kr45uDrAYmqJ1 Sqr0Jwt6Ef8jnbyAbckJGniSH74u+EntuUtaIuzqvEQKA8rYTMHoByBpVvmw7ldD cL86f9lXIwUlrfLJCFlv9iqT6eRWBkOq7olJuIh1PZjZ0d19JAtIRAfx0yvuVs86 qI3n2f6p0rXumU3C7iA6viMyKtPQSjknG7lEXbFemyNpjK8EpQzJh8vDQF8yqk2E unNjO3mAQCfY2zdJ5aTDALC1NvT5R8Pav5+Xa3a0sngTYweLdezl+URNSCOpAgMB AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQs5+qmE6OJ0xMv cHVOJeNDSQSUxTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3Zm aEFjaUVYeTJjUWpUVWpjWGdNem9WcG5mM0Fkc2NwWVloeHVoMnJ3ZlQvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0d2 ZmhBY2lFWHkyY1FqVFVqY1hnTXpvVnBuZjNBZHNjcFlZaHh1aDJyd2ZULzAvMkNF N0VBQTYxM0EzODlEMzEzMkY3MDc1NEUyNUUzNDM0OTA0OTRDNS5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH AQH/BB8wHTAMBAIAATAGAwQCsYHwMA0EAgACMAcDBQAoBHL8MBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwQiKDANBgkqhkiG9w0BAQsFAAOCAQEApv5YzL0bKoqXdzah 1U2mHobDxRGoB2ELUb91sKu/zZO9elY6zoXR8UjcW0rgOQW6lrHxCPmA1paVZCCN oYEuX727bdbfcAv3cxTHBJtdEvjwr1qGH0M8As7SjsBd7NC+qvQcsryNi58L/s1l oQSN+HbtXqGMK+SiycKtS53uOf935J9hteDQ0Uh8jDI9m+frvi4ySqLA1a4V+QB1 +/rjP47tEZZFuRmNmy0MsJ5EsewmqnypBKV1HNQ5d6BSD59WLsQ1D6yKjGl2Tiox zI/gLh7Bv5GhECoXSmXGMraayBwNdSPKTQ0d6MAegeBlbQJXJLGWvsUjYxWdHIWU cUcotw== -----END CERTIFICATE-----Generated at Wed May 13 16:50:21 2026 by rpki-client